{"total":85,"rows":[{"id":"2406.18495","title":"WildGuard: Open One-Stop Moderation Tools for Safety Risks, Jailbreaks, and Refusals of LLMs","created":"2024-06-26","cited_by_count":496,"area":"safety"},{"id":"2406.18510","title":"WildTeaming at Scale: From In-the-Wild Jailbreaks to (Adversarially) Safer Language Models","created":"2024-06-26","cited_by_count":223,"area":"safety"},{"id":"2404.07921","title":"AmpleGCG: Learning a Universal and Transferable Generative Model of Adversarial Suffixes for Jailbreaking Both Open and Closed LLMs","created":"2024-04-11","cited_by_count":172,"area":"safety"},{"id":"2401.17256","title":"Weak-to-Strong Jailbreaking on Large Language Models","created":"2024-01-30","cited_by_count":107,"area":"safety"},{"id":"2410.02832","title":"FlipAttack: Jailbreak LLMs via Flipping","created":"2024-10-02","cited_by_count":80,"area":"safety"},{"id":"2410.13708","title":"On the Role of Attention Heads in Large Language Model Safety","created":"2024-10-17","cited_by_count":72,"area":"safety"},{"id":"2406.18682","title":"The Multilingual Alignment Prism: Aligning Global and Local Preferences to Reduce Harm","created":"2024-06-26","cited_by_count":70,"area":"safety"},{"id":"2501.01765","title":"SaLoRA: Safety-Alignment Preserved Low-Rank Adaptation","created":"2025-01-03","cited_by_count":42,"area":"safety"},{"id":"2405.09055","title":"A safety realignment framework via subspace-oriented model fusion for large language models","created":"2024-05-15","cited_by_count":41,"area":"safety"},{"id":"2402.16006","title":"ASETF: A Novel Method for Jailbreak Attack on LLMs through Translate Suffix Embeddings","created":"2024-02-25","cited_by_count":32,"area":"safety"},{"id":"2402.15180","title":"Break the Breakout: Reinventing LM Defense Against Jailbreak Attacks with Self-Refinement","created":"2024-02-23","cited_by_count":29,"area":"safety"},{"id":"2409.16783","title":"Holistic Automated Red Teaming for Large Language Models through Top-Down Test Case Generation and Multi-turn Interaction","created":"2024-09-25","cited_by_count":25,"area":"safety"},{"id":"2412.10321","title":"AdvPrefix: An Objective for Nuanced LLM Jailbreaks","created":"2024-12-13","cited_by_count":25,"area":"safety"},{"id":"2410.02298","title":"Jailbreak Antidote: Runtime Safety-Utility Balance via Sparse Representation Adjustment in Large Language Models","created":"2024-10-03","cited_by_count":23,"area":"safety"},{"id":"2410.10414","title":"On Calibration of LLM-based Guard Models for Reliable Content Moderation","created":"2024-10-14","cited_by_count":23,"area":"safety"},{"id":"2406.19845","title":"Virtual Context: Enhancing Jailbreak Attacks with Special Token Injection","created":"2024-06-28","cited_by_count":17,"area":"safety"},{"id":"2505.15710","title":"Advancing LLM Safe Alignment with Safety Representation Ranking","created":"2025-05-21","cited_by_count":16,"area":"safety"},{"id":"2412.08615","title":"Exploiting the Index Gradients for Optimization-Based Jailbreaking on Large Language Models","created":"2024-12-11","cited_by_count":15,"area":"safety"},{"id":"2509.24384","title":"HarmMetric Eval: Benchmarking Metrics and Judges for LLM Harmfulness Assessment","created":"2025-09-29","cited_by_count":15,"area":"safety"},{"id":"2406.03805","title":"AutoJailbreak: Exploring Jailbreak Attacks and Defenses through a Dependency Lens","created":"2024-06-06","cited_by_count":14,"area":"safety"},{"id":"2410.03857","title":"You Know What I'm Saying: Jailbreak Attack via Implicit Reference","created":"2024-10-04","cited_by_count":14,"area":"safety"},{"id":"2501.14250","title":"Siren: A Learning-Based Multi-Turn Attack Framework for Simulating Real-World Human Jailbreak Behaviors","created":"2025-01-24","cited_by_count":13,"area":"safety"},{"id":"2505.24445","title":"Learning Safety Constraints for Large Language Models","created":"2025-05-30","cited_by_count":13,"area":"safety"},{"id":"2511.10222","title":"Speech-Audio Compositional Attacks on Multimodal LLMs and Their Mitigation with SALMONN-Guard","created":"2025-11-13","cited_by_count":13,"area":"safety"},{"id":"2408.09878","title":"Transferring Backdoors between Large Language Models by Knowledge Distillation","created":"2024-08-19","cited_by_count":12,"area":"safety"},{"id":"2410.06467","title":"WAPITI: A Watermark for Finetuned Open-Source LLMs","created":"2024-10-09","cited_by_count":12,"area":"safety"},{"id":"2503.01865","title":"Guiding not Forcing: Enhancing the Transferability of Jailbreaking Attacks on LLMs via Removing Superfluous Constraints","created":"2025-02-25","cited_by_count":11,"area":"safety"},{"id":"2505.16559","title":"CTRAP: Embedding Collapse Trap to Safeguard Large Language Models from Harmful Fine-Tuning","created":"2025-05-22","cited_by_count":11,"area":"safety"},{"id":"2408.10668","title":"Probing the Safety Response Boundary of Large Language Models via Unsafe Decoding Path Generation","created":"2024-08-20","cited_by_count":10,"area":"safety"},{"id":"2410.22143","title":"AmpleGCG-Plus: A Strong Generative Model of Adversarial Suffixes to Jailbreak LLMs with Higher Success Rates in Fewer Attempts","created":"2024-10-29","cited_by_count":10,"area":"safety"},{"id":"2504.13562","title":"DETAM: Defending LLMs Against Jailbreak Attacks via Targeted Attention Modification","created":"2025-04-18","cited_by_count":10,"area":"safety"},{"id":"2402.13926","title":"Large Language Models are Vulnerable to Bait-and-Switch Attacks for Generating Harmful Content","created":"2024-02-21","cited_by_count":9,"area":"safety"},{"id":"2507.11630","title":"Jailbreak-Tuning: Models Efficiently Learn Jailbreak Susceptibility","created":"2025-07-15","cited_by_count":9,"area":"safety"},{"id":"2408.09093","title":"BaThe: Defense against the Jailbreak Attack in Multimodal Large Language Models by Treating Harmful Instruction as Backdoor Trigger","created":"2024-08-17","cited_by_count":8,"area":"safety"},{"id":"2510.07835","title":"MetaDefense: Defending Finetuning-based Jailbreak Attack Before and During Generation","created":"2025-10-09","cited_by_count":8,"area":"safety"},{"id":"2501.18626","title":"The TIP of the Iceberg: Revealing a Hidden Class of Task-in-Prompt Adversarial Attacks on LLMs","created":"2025-01-27","cited_by_count":7,"area":"safety"},{"id":"2505.15753","title":"Scalable Defense against In-the-wild Jailbreaking Attacks with Safety Context Retrieval","created":"2025-05-21","cited_by_count":7,"area":"safety"},{"id":"2505.23856","title":"OMNIGUARD: An Efficient Approach for AI Safety Moderation Across Languages and Modalities","created":"2025-05-29","cited_by_count":7,"area":"safety"},{"id":"2512.01353","title":"The Trojan Knowledge: Bypassing Commercial LLM Guardrails via Harmless Prompt Weaving and Adaptive Tree Search","created":"2025-12-01","cited_by_count":7,"area":"safety"},{"id":"2601.10141","title":"Understanding and Preserving Safety in Fine-Tuned LLMs","created":"2026-01-15","cited_by_count":7,"area":"safety"},{"id":"2410.13691","title":"Jailbreaking LLM-Controlled Robots","created":"2024-10-17","cited_by_count":6,"area":"safety"},{"id":"2407.10106","title":"DistillSeq: A Framework for Safety Alignment Testing in Large Language Models using Knowledge Distillation","created":"2024-07-14","cited_by_count":5,"area":"safety"},{"id":"2408.03603","title":"EnJa: Ensemble Jailbreak on Large Language Models","created":"2024-08-07","cited_by_count":5,"area":"safety"},{"id":"2504.08104","title":"Geneshift: Impact of different scenario shift on Jailbreaking LLM","created":"2025-04-10","cited_by_count":5,"area":"safety"},{"id":"2508.04451","title":"Automatic LLM Red Teaming","created":"2025-08-06","cited_by_count":5,"area":"safety"},{"id":"2510.09871","title":"CoBia: Constructed Conversations Can Trigger Otherwise Concealed Societal Biases in LLMs","created":"2025-10-10","cited_by_count":5,"area":"safety"},{"id":"2510.15975","title":"Generative AI for Biosciences: Emerging Threats and Roadmap to Biosecurity","created":"2025-10-13","cited_by_count":5,"area":"safety"},{"id":"2502.16174","title":"Efficient LLM Moderation with Multi-Layer Latent Prototypes","created":"2025-02-22","cited_by_count":4,"area":"safety"},{"id":"2505.09820","title":"Adversarial Attack on Large Language Models using Exponentiated Gradient Descent","created":"2025-05-14","cited_by_count":4,"area":"safety"},{"id":"2509.14651","title":"MUSE: MCTS-Driven Red Teaming Framework for Enhanced Multi-Turn Dialogue Safety in Large Language Models","created":"2025-09-18","cited_by_count":4,"area":"safety"},{"id":"2510.01088","title":"Safety Instincts: LLMs Learn to Trust Their Internal Compass for Self-Defense","created":"2025-10-01","cited_by_count":4,"area":"safety"},{"id":"2601.10543","title":"Defending Large Language Models Against Jailbreak Attacks via In-Decoding Safety-Awareness Probing","created":"2026-01-15","cited_by_count":4,"area":"safety"},{"id":"2410.02220","title":"Data to Defense: The Role of Curation in Customizing LLMs Against Jailbreaking Attacks","created":"2024-10-03","cited_by_count":3,"area":"safety"},{"id":"2602.13547","title":"AISA: Awakening Intrinsic Safety Awareness in Large Language Models against Jailbreak Attacks","created":"2026-02-14","cited_by_count":3,"area":"safety"},{"id":"2603.03323","title":"Discern Truth from Falsehood: Reducing Over-Refusal via Contrastive Refinement","created":"2026-02-10","cited_by_count":3,"area":"safety"},{"id":"2604.09544","title":"Large Language Models Generate Harmful Responses Using a Distinct Mechanism, Shared Across Harm Types","created":"2026-04-10","cited_by_count":3,"area":"safety"},{"id":"2605.05058","title":"SoK: Robustness in Large Language Models against Jailbreak Attacks","created":"2026-05-06","cited_by_count":3,"area":"safety"},{"id":"2505.01315","title":"Helping Large Language Models Protect Themselves: An Enhanced Filtering and Summarization System","created":"2025-05-02","cited_by_count":2,"area":"safety"},{"id":"2508.16325","title":"ConceptGuard: Neuro-Symbolic Safety Guardrails via Sparse Interpretable Jailbreak Concepts","created":"2025-08-22","cited_by_count":2,"area":"safety"},{"id":"2510.01342","title":"Fine-Tuning Jailbreaks under Highly Constrained Black-Box Settings: A Three-Pronged Approach","created":"2025-10-01","cited_by_count":2,"area":"safety"},{"id":"2512.05339","title":"Taxonomy-Adaptive Moderation Model with Robust Guardrails for Large Language Models","created":"2025-12-05","cited_by_count":2,"area":"safety"},{"id":"2602.03328","title":"GuardReasoner-Omni: A Reasoning-based Multi-modal Guardrail for Text, Image, Video, and Audio","created":"2026-02-03","cited_by_count":2,"area":"safety"},{"id":"2603.02588","title":"ExpGuard: LLM Content Moderation in Specialized Domains","created":"2026-03-03","cited_by_count":2,"area":"safety"},{"id":"2509.24488","title":"Sanitize Your Responses: Mitigating Privacy Leakage in Large Language Models","created":"2025-09-29","cited_by_count":1,"area":"safety"},{"id":"2511.03271","title":"Let the Bees Find the Weak Spots: A Path Planning Perspective on Multi-Turn Jailbreak Attacks against LLMs","created":"2025-11-05","cited_by_count":1,"area":"safety"},{"id":"2511.07107","title":"MENTOR: A Metacognition-Driven Self-Evolution Framework for Uncovering and Mitigating Implicit Domain Risks in LLMs","created":"2025-11-10","cited_by_count":1,"area":"safety"},{"id":"2512.10998","title":"SCOUT: A Defense Against Data Poisoning Attacks in Fine-Tuned Language Models","created":"2025-12-10","cited_by_count":1,"area":"safety"},{"id":"2603.28817","title":"GUARD-SLM: Token Activation-Based Defense Against Jailbreak Attacks for Small Language Models","created":"2026-03-28","cited_by_count":1,"area":"safety"},{"id":"2606.02640","title":"D-Judge: Disrupting Multi-Turn Jailbreaks using Semantics-Preserving Output Rewriting","created":"2026-05-31","cited_by_count":1,"area":"safety"},{"id":"2606.16751","title":"Automated jailbreak attack targeting multiple defense strategies","created":"2026-06-15","cited_by_count":1,"area":"safety"},{"id":"2405.15152","title":"Machine Unlearning in Large Language Models","created":"2024-05-24","cited_by_count":0,"area":"safety"},{"id":"2508.11290","title":"SafeConstellations: Mitigating Over-Refusals in LLMs Through Task-Aware Representation Steering","created":"2025-08-15","cited_by_count":0,"area":"safety"},{"id":"2602.02280","title":"RACC: Representation-Aware Coverage Criteria for LLM Safety Testing","created":"2026-02-02","cited_by_count":0,"area":"safety"},{"id":"2602.02536","title":"From Sparse Decisions to Dense Reasoning: A Multi-attribute Trajectory Paradigm for Multimodal Moderation","created":"2026-01-28","cited_by_count":0,"area":"safety"},{"id":"2602.17696","title":"Can LLM Safety Be Ensured by Constraining Parameter Regions?","created":"2026-02-06","cited_by_count":0,"area":"safety"},{"id":"2602.20102","title":"BarrierSteer: LLM Safety via Learning Barrier Steering","created":"2026-02-23","cited_by_count":0,"area":"safety"},{"id":"2604.01473","title":"SelfGrader: LLM Jailbreak Detection via Anchored Token-Level Logits","created":"2026-04-01","cited_by_count":0,"area":"safety"},{"id":"2605.19147","title":"Be Kind, Rewrite: Benign Projections via Rewriting Defend Against LLM Data Poisoning Attacks","created":"2026-05-18","cited_by_count":0,"area":"safety"},{"id":"2606.30263","title":"Defending Against Harmful Supervision Hidden in Benign Samples","created":"2026-06-29","cited_by_count":0,"area":"safety"},{"id":"2607.18295","title":"On the Limits of Support-Preserving Alignment and Bounded Filtering","created":"2026-07-01","cited_by_count":0,"area":"safety"},{"id":"2607.20472","title":"Robust Critics: Defending LLMs Against Multi-Turn Attacks","created":"2026-05-24","cited_by_count":0,"area":"safety"},{"id":"2609.00790","title":"RISA: Response Inspection and Selective Actions for Refusal Calibration in Large Language Models","created":"2026-09-01","cited_by_count":0,"area":"safety"},{"id":"2609.20129","title":"Local Sparsity Enables Unsupervised LLM Safety Detection","created":"2026-09-17","cited_by_count":0,"area":"safety"},{"id":"2610.05346","title":"Reflections and Fragments: Securing LLMs Against Sequential Mosaic Attacks","created":"2026-10-04","cited_by_count":0,"area":"safety"},{"id":"2610.10203","title":"How to train your model organism","created":"2026-10-07","cited_by_count":0,"area":"safety"}],"next_cursor":null}